{
  "aliases": [],
  "authors": [
    "Georgios Syros",
    "Evan Rose",
    "Brian Grinstead",
    "Christoph Kerschbaumer",
    "William Robertson",
    "Cristina Nita-Rotaru",
    "Alina Oprea"
  ],
  "details": {
    "arxiv_snapshot": {
      "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
      "abstract_sha256": "77fa6f48314afe90107775dac6c54b56570a7284f2b542e3048a590d87c8c118",
      "submitted_at": "2026-02-09T21:46:18Z",
      "updated_at": "2026-06-14T21:10:58Z",
      "version": 2,
      "versioned_url": "https://arxiv.org/abs/2602.09222v2"
    }
  },
  "environments": [
    "web"
  ],
  "evidence": [
    {
      "method": "arxiv_api",
      "retrieved_at": "2026-10-16T06:36:43Z",
      "role": "primary",
      "sha256": "c432f419481a105a8ce71174ec4aea23c4f0d36ddf89cfe1d0974fa349f6cb59",
      "supports": [
        "name",
        "authors",
        "published_at",
        "updated_at",
        "identifiers.arxiv",
        "details.arxiv_snapshot"
      ],
      "url": "https://export.arxiv.org/api/query?search_query=%28ti%3A%22computer+use%22+OR+ti%3A%22computer-use%22+OR+ti%3A%22GUI+agent%22+OR+ti%3A%22GUI+agents%22+OR+ti%3A%22GUI+grounding%22+OR+ti%3A%22web+agents%22+OR+ti%3A%22browser+agent%22%29+AND+submittedDate%3A%5B200001010000+TO+202610160636%5D&start=400&max_results=100&sortBy=submittedDate&sortOrder=descending"
    },
    {
      "method": "editorial_primary_review",
      "retrieved_at": "2026-11-05T23:02:35Z",
      "role": "primary",
      "sha256": "f353252e42750996811310c89de46a219576d87428d3efa95272917abd0c60f1",
      "supports": [
        "name",
        "kind",
        "summary",
        "environments",
        "topics",
        "scope",
        "relations"
      ],
      "url": "https://export.arxiv.org/api/query?id_list=2602.07398%2C2602.07458%2C2602.07624%2C2602.07787%2C2602.07918%2C2602.08235%2C2602.09222%2C2602.09463%2C2602.09514%2C2602.10122%2C2602.10525%2C2602.10863%2C2602.10915%2C2602.11224%2C2602.11514%2C2602.11858%2C2602.12268%2C2602.12852%2C2602.13318%2C2602.13543%2C2602.13692%2C2602.14038%2C2602.14337%2C2602.14364%2C2602.15384%2C2602.16165%2C2602.16317%2C2602.16666%2C2602.16901%2C2602.16930%2C2602.17049%2C2602.17245%2C2602.17547%2C2602.17646%2C2602.18846%2C2602.19320%2C2602.19594%2C2602.19870%2C2602.21858%2C2602.22190%2C2602.22769%2C2602.22897%2C2602.23166%2C2602.23235%2C2602.23320%2C2602.24142%2C2603.00188%2C2603.00198%2C2603.00503%2C2603.00676&max_results=50"
    }
  ],
  "id": "arxiv:2602.09222",
  "identifiers": {
    "arxiv": "2602.09222"
  },
  "kind": "paper",
  "last_verified_at": "2026-11-05T23:02:35Z",
  "licenses": {
    "code": null,
    "data": null,
    "document": null,
    "weights": null
  },
  "links": [
    {
      "rel": "primary",
      "url": "https://arxiv.org/abs/2602.09222"
    }
  ],
  "name": "MUZZLE: Adaptive Agentic Red-Teaming of Web Agents Against Indirect Prompt Injection Attacks",
  "notes": "The annotation and scope were reviewed against the complete retained arXiv abstract (v2). Experiments, reported performance and artifact availability have not been independently reproduced.",
  "published_at": "2026-02-09",
  "relations": [],
  "review_status": "curated",
  "scope": "core",
  "summary": "MUZZLE evaluates web-agent exposure to indirect prompt injection by finding attack surfaces in agent trajectories and refining injected instructions from execution feedback.",
  "topics": [
    "safety-security",
    "evaluation",
    "interaction-history",
    "web-navigation"
  ],
  "updated_at": "2026-06-14",
  "url": "https://arxiv.org/abs/2602.09222"
}